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« The MAILING DATE of this communication appears on the cover sheet with the correspondence address-- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . [3 This communication is responsive to January 14, 2004 . 

2. The allowed claim(s) is/are 1-10,12-19 and 22-26 . 

3. ^ The drawings filed on 08 June 1999 are accepted by the Examiner. 

4. ^ Acknowledgment is made of a claim for foreign priority under 35 U.S. C. § 1 1 9(a)-(d) or (f). 

a) M All b) □ Some* c) □ None of the: 

1. M Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

5. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

6. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

7. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL 
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Allowable Subject Matter 



1 . Claims 1 -1 0, 1 2-1 9 and 22-26 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 

The primary reasons for the allowance of the independent claims 1 , 15-17 and 
22-24 are the inclusion of the following limitations that are not found in the prior art and 
they are uniquely distinct features. The closest prior arts are Boebert et al. (5,502,766), 
Kandanskyetal. (6,295,361 B1)and Saito etal. (EP 0715241 A2). Boebert etal. 
disclose a data enclave system for securing data stored on a fixed or removable 
physical media in a local or a wide area network with a plurality of workstations and a 
server. In this system an enclave key is stored in the server and in each workstation 
and it is used to protect other encryption keys stored or transmitted on the network. A 
media key is also provided for each unit of media, and used to encrypt and protect data 
carried on the media, with the media keys stored in the personal keying devices. 
Kandansky et al. disclose a method and apparatus that allow a key manager node in a 
network to initiate the process of changing a group key for all nodes in a multicasting 
group. The key manager sets an indicator whenever the key manager determines that 
the nodes in the group need to change their key. The members in the multicast group 
then obtain the new group key from the key manager via an appropriate key 
distribution process. Also, the group members may individually request a new group 
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key. The group members use the group key to encrypt or decrypt multicasting packets. 
Saito et al. disclose a data copyright management apparatus having a transmitting side 
and a receiving side. Saito et al. disclose a first secret key that is used to encrypt digital 
information at the transmitting side and to decrypt it at the receiving side. The 
information is re-encrypted using a second secret key and stored in a hard disk, flexible 
disk, optical disk, writable video disk or the like. These three arts, singularly or in 
combination, fail to anticipate or render the following limitations: 

"Claim 1: An electronic data storage apparatus comprising for storing electronic 
document: 

a key management unit managing an individual key unique to said electronic 
data storage apparatus to which said management unit belongs, and a common key 
shared with other electronic data storage apparatuses of the group, selecting the 
individual key when performing an encryption process on an electronic document stored 
in said electronic data storage apparatus to which said management unit belongs, and 
selecting the common key when performing the encryption process or when verifying 
the electronic document transmitted to or received from another electronic data storage 
apparatus; and 

an encryption unit performing the encryption process using the key selected by 
said key management unit." 
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"Claim 15: re-encrypting, by a first electronic data storage apparatus in one 
hierarchical level of the hierarchical structure, a document encrypted using an individual 
key which is unique to and stored in the apparatus, using a higher order group key 
corresponding to the hierarchical level, and transmitting the re-encrypted document to 
an electronic data storage and management apparatus for managing the electronic data 
storage apparatuses in a group at one hierarchical level lower; 

verifying, by said electronic data storage and management apparatus for 
managing a lower group of electronic data storage apparatuses, the received document 
using the higher order group key, re-encrypting the received document using the lower 
order group key corresponding to one hierarchical level lower if the received documents 
is correct as a result of the verification, and transmitting the received document to a 
second electronic data storage apparatus in the group at one level lower; and 

verifying, by the second electronic data storage apparatus, the received 
documents using the lower order group key, re-encrypting the received document using 
an individual key unique to the second electronic data storage apparatus if the 
electronic document is correct as a result of the verification, and storing the 
re-encrypted received document." 

"Claim 16: re-encrypting, by a first electronic data storage apparatus in one 
hierarchical level of the hierarchical structure, a document encrypted using an individual 
key which is unique to and stored in the apparatus, using a lower order group key 
corresponding to the hierarchical level, and transmitting the re-encrypted document to a 
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lower order group electronic data storage and management apparatus for managing the 
electronic data storage apparatuses in the group; 

verifying, by said electronic data storage and management apparatus for 
managing a lower group of electronic data storage apparatuses, the received document 
using the lower order group key, re-encrypting the received data using the higher order 
group key corresponding to one hierarchical level higher if the electronic document is 
correct as a result of the verification, and transmitting the document to a receiving 
electronic data storage apparatus in the group at one level higher; and 

verifying, by the receiving second electronic data storage apparatus, the received 
document using the lower order group key, re-encrypting the received document using 
an individual key unique to the second electronic data storage apparatus if the 
electronic document is correct as a result of the verification, and storing the 
re-encrypted received document." 

"Claims 17 and 23: storing in a storage unit an individual key unique to an 
electronic data storage apparatus for storing an electronic document and a common key 
shared with another electronic data storage apparatus; 

selecting the common key stored in the storage unit as a key to be used when 
communicating the electronic document; 

selecting the individual key to be used when performing an encryption process 
on the document to be stored in said electronic data storage apparatus; and 
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performing the communication process or encryption process using the selected 

key." 

"Claim 22: An electronic data storage apparatus comprising for storing electronic 
document: 

key management means for managing an individual key unique to an electronic 
document storage apparatus to which said management means belongs, and a 
common key shared with other electronic data storage apparatuses, selecting the 
individual key when performing an encryption process on the electronic document 
stored in the electronic data storage apparatus to which said means belongs, and 
selecting the common key when performing an encryption process or when verifying the 
electronic document transmitted to or received from another electronic data storage 
apparatus; and 

encryption means performing the encryption process using the key selected by 
said key management unit." 

"Claim 24: storing a local encryption key for the local environment locally and 
storing a global key for the global environment; 

receiving a document to be transmitted along with an environment indicator 
indicating the environment of the document transmission; 

selecting one of the local and global encryption keys responsive to the indicator; 

encrypting the document with the selected one of the keys; and 
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transmitting the encrypted data, and 

wherein the local key is used for data storage in a local data storage unit only by 
a local data storage system that stores the local key. 

3. The dependent claims 2-10, 12-14, 18,19, 25 and 26 are allowed because they 
were originally found to include a unique feature not found in the closest 
abovementioned art. 

4. Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Abdulhakim Nobahar whose telephone number is 703- 
305-8074. The examiner can normally be reached on M-F 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 703-305-1830. The fax phone numbers 
for the organization where this application or proceeding is assigned are 703-746-7239 
for regular communications and 703-746-7238 for After Final communications. 
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Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 

Abdulhakim Nobahar, Examiner, Art Unit 2132 
March 4, 2004 
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